Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/VQX6m33SZPvH8JSbpYQbHjIMKjU.roa
File: VQX6m33SZPvH8JSbpYQbHjIMKjU.roa (raw, json)
Hash identifier: 1FfjB6IfaND/QVLFc1n9lPq9XAfOr/9fRynfY9qWOkk=
Subject key identifier: 55:05:FA:9B:7D:D2:64:FB:C7:F0:94:9B:A5:84:1B:1E:32:0C:2A:35
Certificate issuer: /CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Certificate serial: 01856CE60D1F2A1F7393C9257662A2590CB2
Authority key identifier: EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/VQX6m33SZPvH8JSbpYQbHjIMKjU.roa
Signing time: Sun 01 Jan 2023 10:34:53 +0000
ROA not before: Sun 01 Jan 2023 10:34:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203206
IP address blocks: 185.78.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:0d:1f:2a:1f:73:93:c9:25:76:62:a2:59:0c:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec72427cb2faf8bd9b6dd9ae137c4d4914a8e810
Validity
Not Before: Jan 1 10:34:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5505fa9b7dd264fbc7f0949ba5841b1e320c2a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:78:40:c9:6f:b9:96:d9:97:79:63:12:ef:cc:
70:5b:ed:9f:de:92:ef:ca:eb:47:37:2b:50:50:5e:
38:b6:98:99:6e:2b:4a:0b:13:18:2a:05:3e:b9:cb:
4f:f1:90:83:e1:4d:7b:5c:12:12:c7:16:3c:1a:a7:
6a:25:a2:90:67:48:0c:71:d9:ed:76:a4:2c:59:69:
4c:89:66:6f:e4:95:a4:b0:7f:6c:35:42:33:c9:e8:
c6:b6:a6:da:cb:87:8b:04:0a:51:74:d5:30:39:cc:
57:67:b0:0d:23:d6:89:58:05:11:a9:ad:a4:83:dd:
92:d8:5f:f1:ad:92:5c:b8:04:7a:92:79:23:d0:62:
e5:67:72:7c:c5:f8:ec:63:43:69:4e:26:36:40:49:
2d:21:43:1b:f6:fc:ca:dd:b9:65:aa:70:ad:a9:fb:
42:8d:ba:f2:33:d2:28:bf:4e:12:e8:fa:ba:1b:bd:
e7:76:39:75:96:81:ae:f2:30:9c:41:7f:49:03:22:
00:bb:94:f4:b3:0e:d6:c8:fc:7b:5a:da:7d:1d:ab:
65:3a:8f:43:03:35:2c:ef:e4:26:b3:03:0c:be:de:
8c:92:12:18:d9:18:0c:26:d0:1c:8a:47:da:10:c9:
76:0c:35:fe:18:cd:0d:8c:01:0b:b1:71:46:a4:3e:
7c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:05:FA:9B:7D:D2:64:FB:C7:F0:94:9B:A5:84:1B:1E:32:0C:2A:35
X509v3 Authority Key Identifier:
keyid:EC:72:42:7C:B2:FA:F8:BD:9B:6D:D9:AE:13:7C:4D:49:14:A8:E8:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7HJCfLL6-L2bbdmuE3xNSRSo6BA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/VQX6m33SZPvH8JSbpYQbHjIMKjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/79e49f-880f-4d99-b9a5-4df3db807327/1/7HJCfLL6-L2bbdmuE3xNSRSo6BA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.129.0/24
Signature Algorithm: sha256WithRSAEncryption
98:08:ac:1f:fc:96:ea:9e:ad:1b:13:19:91:7c:1a:98:23:4a:
e8:09:c3:87:39:8e:c9:a2:2b:97:e0:76:fb:8e:cd:7c:4f:cc:
ad:65:01:cb:2d:52:b1:77:22:26:68:ea:b5:27:31:83:2d:bc:
b2:cc:6e:90:73:b4:c1:81:ce:18:95:6b:a6:ed:7f:e6:22:27:
15:8e:00:b0:bc:57:bc:8c:36:b9:80:71:9e:37:47:4b:50:ce:
d9:d7:76:48:6b:3d:5d:81:21:26:63:b4:ed:67:31:88:9b:c5:
40:01:bf:c0:e1:87:b2:be:c1:4c:6a:a7:35:fa:e6:e1:90:bb:
48:50:09:b4:b5:dd:b2:45:df:2c:59:f2:6c:fc:bd:ef:0f:a8:
3c:2d:6f:07:3f:14:ee:c4:39:ad:62:29:9c:c8:a6:f5:95:39:
91:fd:52:9b:95:03:29:46:bb:d3:8a:15:11:87:c3:fa:01:6f:
1a:bf:5a:e8:43:5e:87:b5:ca:c2:09:c4:a3:17:4c:78:3c:1c:
9c:bb:92:91:e6:b7:d3:3e:c8:cf:74:5a:00:24:41:c9:85:00:
e7:6b:06:b9:5d:e2:47:82:55:ee:f0:17:23:6e:62:5f:1e:e2:
c7:bc:ca:f5:7d:94:4a:aa:28:be:7c:ee:59:b7:17:70:63:6c:
4e:5b:c4:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:13:27 2024 by rpki-client on console.sobornost.net